Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/bFeeG1xInSnFZRAiZVZ7g2QcNp8.roa
File:                     bFeeG1xInSnFZRAiZVZ7g2QcNp8.roa (raw, json)
Hash identifier:          +4+gYWqpbwS1aHQgae+XdtCJhe7MfUrmgMEUSCQs3n0=
Subject key identifier:   6C:57:9E:1B:5C:48:9D:29:C5:65:10:22:65:56:7B:83:64:1C:36:9F
Certificate issuer:       /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial:       6A
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/bFeeG1xInSnFZRAiZVZ7g2QcNp8.roa
Signing time:             Thu 01 Jun 2023 07:36:13 +0000
ROA not before:           Thu 01 Jun 2023 07:36:13 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9351
IP address blocks:        182.22.128.0/17 maxlen: 17

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106 (0x6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
        Validity
            Not Before: Jun  1 07:36:13 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=6C579E1B5C489D29C565102265567B83641C369F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:3f:35:32:3a:6a:37:63:6d:c4:3a:20:5c:ad:
                    54:33:34:40:2d:02:03:50:e7:9a:c9:35:5e:eb:c2:
                    90:b4:da:e3:20:bf:a4:f7:61:1c:c6:ab:3a:9a:60:
                    3d:45:71:dd:d4:3e:6c:a3:d0:a1:29:e6:25:30:52:
                    51:9f:c9:40:2e:0e:29:95:40:d4:f7:1c:4f:67:d0:
                    b4:90:a2:5c:0d:61:43:a2:47:33:d4:1c:07:be:a2:
                    92:7d:da:2f:43:7a:bf:12:59:c5:40:4b:00:1b:ec:
                    06:0d:39:c4:4b:75:a9:a2:e7:d3:d4:c4:a7:24:a5:
                    6e:d8:cd:18:68:bc:7e:59:10:af:c2:32:87:54:ca:
                    c2:70:86:a3:39:82:7c:9a:74:52:b8:5c:c9:63:55:
                    6e:ca:93:9f:58:27:94:b4:dc:0b:83:f4:7f:0b:49:
                    b7:b3:00:bb:73:2d:43:f2:aa:f7:d8:51:94:c5:39:
                    70:df:76:bc:3a:a2:be:37:15:21:1d:ca:89:14:9f:
                    7c:c9:a5:35:0b:43:eb:4a:11:14:1d:04:57:01:1f:
                    73:8e:db:ba:ad:9a:f4:4d:fe:05:39:44:5f:99:63:
                    cf:d3:f9:6c:aa:01:2b:67:b6:32:a5:2d:f6:f7:22:
                    cc:d0:ed:af:42:4f:e5:e7:a7:93:39:ad:37:2d:48:
                    5c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:57:9E:1B:5C:48:9D:29:C5:65:10:22:65:56:7B:83:64:1C:36:9F
            X509v3 Authority Key Identifier:
                keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/bFeeG1xInSnFZRAiZVZ7g2QcNp8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.22.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         59:92:79:85:be:d3:7a:0e:02:45:aa:71:42:3d:17:15:54:18:
         cc:86:cc:d0:71:3e:6b:9f:52:29:c0:e9:9d:c5:96:58:7b:7a:
         0f:77:e7:9b:51:7d:17:34:0f:20:0f:ba:a6:8e:1d:e0:e5:05:
         62:0b:30:59:2e:8b:5d:95:26:61:cb:ca:7f:df:bc:c2:66:bb:
         0c:79:2e:df:46:9a:b6:3b:fa:24:56:a3:ee:59:5a:1d:e8:2e:
         d9:5e:31:a0:60:6e:1a:01:f3:0f:0f:57:a8:53:95:d6:de:db:
         95:42:e5:a6:bf:0e:82:e5:02:27:71:15:91:a6:35:6c:c1:8a:
         97:a9:d5:7d:cb:fc:84:18:2c:ab:1d:37:32:a1:2c:f9:39:ad:
         b0:e6:26:06:b4:25:aa:e4:53:86:68:97:aa:94:81:e2:e9:65:
         67:18:ec:a8:c2:00:51:ef:26:a9:8c:fe:9f:bc:58:48:23:f5:
         5d:48:26:cb:f7:8e:fa:56:db:7f:6f:f1:e6:b6:c9:3d:06:e3:
         99:7f:5d:4c:60:2b:2d:d1:e7:8b:8f:56:d1:97:ae:d3:ad:1d:
         eb:0d:ce:3d:c8:3f:04:b3:df:60:21:1c:a4:bd:10:ab:cd:1c:
         00:9a:ff:be:8c:04:79:c3:18:1a:bd:c7:d2:32:53:9a:1e:1d:
         44:d9:cc:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org